Android Question Question about my APK file

One can extract the signature but won't be able to sign his own app with your private key.

KMatle said:

One can extract the signature but won't be able to sign his own app with your private key.

Click to expand...

Thank you KMatle for your answer ,Can you tell me why they can't use my private key.

It is called asymmetric cryptography: https://en.wikipedia.org/wiki/Public-key_cryptography

Your key includes a pair of keys. The public key which is included in the APK and the private key. The APK also includes the signature (the files are in the META-INF folder).

You must have both the public and the private keys in order to create the signature. You can verify the signature with the public key.

It should be very difficult to find the private key.